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AMSKDHD CLAIMS 

1. A method of monitoring an information system, 
comprising! 

providing a real-time engine unit (12) in 
communication wLth a broker unit (14), the engine unit (13) 
having an .event source unit (30) and a metrics source unit 
(32); 

the event sourae unit (30) monitoring an event unit 

(42)/ 

the engine unit (12) reaeivlng an event signal (94) 
from the source unit (30) in a first protocol language,- 

linking a metrics parameter (4B) of the unit (32) to 
events in the event unit (42) of the event source unit (3 0); 

the metrics parameter (48) counting a number of event: 
occurrences of the event unit (42) ; 

the metrlas parameter (48) comparing the number at 
event occurrences no a threshold value; 

the metrios parameter (43) sending an alert signal 
(95) when the number of event occurrences is greater than the 
threshold value; 

the engine unit (12) receiving the alert signal (96) 
firom the source unit (32) in a Becond protocol language; 

the engine unit (12) converting the first protocol 
language of the signal (94) and the second protocol language 
of the signal (96) to a third protocol language; 

the engine unit (12) transmitting a signal (74) in the 
third protoaol language, the signal (74) containing 
information from the signals (94, 96); 
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the broker unit (14) receiving information o£ the 
signal {74) in the third protocol language, the unit (14) 
converting the Information in the third protocol language to 
a universal protocol language that is understood by a 
plurality of consumers (I6a-16f) ; 

the broker unit (14) sending signals (78a~78f) 
containing the information in the universal protocol language 
to the consumer units (16a~16f) , respectively; and 

the consumer units (lSa-16f) receiving the signals 
(78a-78f) and displaying, in real-time, the metrics parameter 
(48) linked to the events in the event unit (32) . 
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2. The method according to alaim 1 wherein tha method 
further comprieae the engine unit (12) filtering information 
and correlating events. 

3. The method according to claim 1 wherein the method 
further comprises the engine unit (12) is only able to 
communiaate with the broker unit (14) . 

4. The method according to claim 1 wherein the method 
further comprises the broker unit (14) converting information 
from the engine unit (12) to a format that is readable by all 
the consumers (16a- 16f ) - 

5. The method according to claim 1 wherein the method 
further comprises the broker unit (14) communicating with the 
engine unit (12) in a unique language (73) that is only u^ed 
in communication with the broker unit {14) and the engine 
unit (12) . 

6. Tha method according to claim l wherein the method 
further comprises the broker unit (14) converting information 
in a signal (74) to a uniform protocol (76) that is 
understood by all the Consumers (16a- 16f ) ■ 
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7. The method according to claim 1 wherein the method 
further comprises the source unit (3 0) monitoring events (42) 
without retrieving the events (42) . 

8 . The method according to claim 7 wherein the method 
fiurther comprises grading the event (43) according to a 
severity grade. 

9* The method according to alaim 1 wherein the method 
further comprises the event (42) triggering a second event > 

10. She method according to claim 1 wherein the method 
further comprise^ the metric source unit (32) monitoring 
metric parameters. 
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